Roles claim missing from the access token

Have registered an app for SSO to web app. Created App roles for the app. Assigned users to groups and assigned groups to the app roles. The access tokens of the authenticated users do not show the roles claim. There are no groups or roles claim in the access token. Have been banging my head since several days now but this shit doesn't seem to budge. Went through all similar questions but nothing has helped so far. Seeking out the community for help.